Medium
5.4
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest(...
CVE-2026-112786
First seen on SecPulse
Original description The description as published by the source.
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's revert action with an importID to mass-delete imported candidate, company, and contact records.
Source: NIST National Vulnerability Database NVD GitHub Advisory